Aspportal is a narrowly scoped web portal product that has disclosed vulnerabilities concentrated around SQL injection and related input-handling weaknesses. The vendor's disclosures frequently acquire public exploit code, making timely patching important for deployed instances. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Aspportal over time
Signals from CVEs in this vendor scope (6 CVEs).
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2006-1353HIGH Multiple SQL injection vulnerabilities in ASPPortal 3.1.1 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the downloadid parameter in download_click.as | Mar 22, 2006 | 7.5 | 29 | NO | YES |
CVE-2008-5268HIGH SQL injection vulnerability in content/forums/reply.asp in ASPPortal allows remote attackers to execute arbitrary SQL commands via the Topic_Id parameter. | Nov 28, 2008 | 7.5 | 28 | NO | YES |
CVE-2006-5879HIGH SQL injection vulnerability in default1.asp in ASPPortal 4.0.0 beta and earlier allows remote attackers to execute arbitrary SQL commands via the Poll_ID parameter, a different vec | Nov 14, 2006 | 7.5 | 28 | NO | YES |
CVE-2008-6382MEDIUM ASP Portal 3.2.5 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file via a direct request | Mar 2, 2009 | 5.0 | 24 | NO | YES |
CVE-2006-1262HIGH Multiple SQL injection vulnerabilities in ASPPortal 3.00 have unknown impact and attack vectors. | Mar 19, 2006 | 7.5 | 19 | NO | NO |
CVE-2006-1261MEDIUM Multiple cross-site scripting (XSS) vulnerabilities in ASPPortal 3.00 allow remote attackers to inject arbitrary web script or HTML via unknown attack vectors. | Mar 19, 2006 | 4.3 | 14 | NO | NO |
Signals from CVEs in this vendor scope (6 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Aspportal.
Media articles that mention a CVE ID that affects a product developed by Aspportal — matched by CVE ID, not by vendor name.